Skip to contentMitel vulnerabilities
Newest
- mitel micontact center businessThe Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker...CVE-2020-246933.3 Low
- mitel shoretel firmwareThe conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated...CVE-2020-28351Public exploitEPSS 16.0%6.1 Medium
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted...CVE-2020-245955.3 Medium
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute...CVE-2020-245949.6 Critical
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL...CVE-2020-245937.2 High
- mitel micloud management portalMitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted...CVE-2020-245925.3 Medium
- mitel micontact center businessThe Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to...CVE-2020-246927.1 High
- mitel micollab audio\, web \& video conferencingAn Authentication Bypass vulnerability in the Published Area of the web conferencing component of...CVE-2020-117977.5 High
- mitel mivoice connect clientA remote code execution vulnerability in Mitel MiVoice Connect Client before 214.100.1223.0 could...CVE-2020-124568.8 High
- mitel 6863 firmware, 6865 firmware, 6867 firmware +8 more +10 moreThe Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0...CVE-2020-136177.5 High
- mitel micollabThe Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access...CVE-2020-137675.9 Medium
- mitel micollabThe SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by...CVE-2020-138638.1 High
- mitel micollab audio\, web \& video conferencingA Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before...CVE-2020-11798Public exploitEPSS 48.8%5.3 Medium
- mitel mivoice connect, shoretel conference web +1 moreA reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web...CVE-2020-126796.1 Medium
- mitel mivoice connect clientA weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow...CVE-2020-103779.8 Critical
- mitel mivoice connectA remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1...CVE-2020-102119.8 Critical
- mitel micollab audio\, web \& video conferencingA SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8...CVE-2019-196089.8 Critical
- mitel micollab audio\, web \& video conferencingA SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1...CVE-2019-196079.8 Critical
- mitel micollab audio\, web \& video conferencingA cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab...CVE-2019-193716.1 Medium
- mitel micollabA cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel...CVE-2019-193706.1 Medium
- mitel 6863i firmware, 6865i firmware, 6867i firmware +5 more +7 moreA key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900...CVE-2019-188635.9 Medium
- mitel micontact center businessThe Software Development Kit of the MiContact Center Business with Site Based Security 8.0...CVE-2020-93796.5 Medium
- mitel sip-dect firmwareAn encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an...CVE-2019-198915.9 Medium
- mitel micollab, mivoice business express +1 moreA vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601)...CVE-2018-188195.3 Medium
- mitel micollab, micollab audio\, web \& video conferencing +1 moreMiCollab 7.3 PR2 (7.3.0.204) and earlier, 7.2 (7.2.2.13) and earlier, and 7.1 (7.1.0.57) and...CVE-2019-121659.8 Critical
- mitel cmg suiteSQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated...CVE-2018-182859.8 Critical
- mitel cmg suiteSQL injection vulnerabilities in CMG Suite 8.4 SP2 and earlier, could allow an unauthenticated...CVE-2018-182869.8 Critical
- mitel inattend, cmg suite +1 moreThe BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a...CVE-2018-192759.8 Critical
- mitel connect onsiteA reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 18.82.2000.0...CVE-2019-9593Public exploit6.1 Medium
- mitel connect onsiteA reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE 19.45.1602.0...CVE-2019-9592Public exploit6.1 Medium
- mitel connect onsiteA reflected Cross-site scripting (XSS) vulnerability in ShoreTel Connect ONSITE before 19.49.1500...CVE-2019-9591Public exploit6.1 Medium
- mitel mivoice office 400A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 ...CVE-2018-162266.1 Medium
- mitel mivoice 5330e firmwareThe Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet...CVE-2018-154979.8 Critical
- mitel st firmwareA vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and...CVE-2018-129016.1 Medium
- mitel shortel mobility client, shoretel mobility client andoid, mobility client ios +2 moreShoreTel Mobility Client for iOS and Android, version 9.1.3.109 and earlier, fails to properly validate SSL certificates provided by HTTPS connectionsCVE-2016-65627.5 High
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...CVE-2018-91046.1 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...CVE-2018-91036.1 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...CVE-2018-91026.5 Medium
- mitel mivoice connect, st 14.2 +1 moreA vulnerability in the conferencing component of Mitel MiVoice Connect, versions R1707-PREM SP1 ...CVE-2018-91016.1 Medium
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...CVE-2018-5782Public exploitEPSS 18.7%9.8 Critical
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...CVE-2018-57819.8 Critical
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...CVE-2018-57809.8 Critical
- mitel connect onsite, st14.2 +1 moreA vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and...CVE-2018-57799.8 Critical
- mitel st14.2A vulnerability in the conferencing component of Mitel ST 14.2, release GA28 and earlier, could...CVE-2017-162518.8 High
- mitel st14.2A vulnerability in Mitel ST 14.2, release GA28 and earlier, could allow an attacker to use the...CVE-2017-162505.3 Medium
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- mitel nupoint messengerThe server in Mitel NuPoint Messenger R11 and R3 sends usernames and passwords in cleartext to...CVE-2008-67977.8 High
- mitel 3300 integrated communication platformThe web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2...CVE-2004-09455.0 Medium